Welcome to Nova Health — طوارئ الأطفال و صحة المرأة (Pediatric Emergency and Women's Health). This Privacy Policy explains how we collect, use, disclose, and protect your personal and medical information when you use our mobile application, website, and healthcare services.
By using Nova Health's services, you agree to the practices described in this policy. Please read this document carefully and contact us if you have any questions.
🔒 Nova Health processes sensitive health data. We apply strict security controls and comply with applicable healthcare privacy regulations to protect your information at all times.
What Information We Collect
To provide you with quality healthcare services, we collect the following types of information:
Personal Identity
Full name, date of birth, gender, national ID, contact number, and email address.
Medical Information
Health records, diagnoses, prescriptions, allergies, blood group, and visit history.
Appointment Data
Booking details, doctor selections, shift preferences, and consultation records.
Device & Usage
Device type, OS version, app usage patterns, and push notification tokens (push notifications).
Payment Information
Transaction records, payment mode, and billing details for consultation charges.
Family Members
Information about family members or dependents you book appointments for.
How We Use Your Information
Nova Health uses your information solely to deliver and improve healthcare services. We do not use your data for advertising purposes.
- Appointment Management: Scheduling, confirming, and managing your medical appointments with our doctors.
- Patient Records: Maintaining accurate medical records, generating your unique Patient URN, and tracking health history.
- Video Consultations: Facilitating secure live video calls between you and our medical staff via an encrypted video call platform.
- Push Notifications: Sending appointment reminders, incoming call alerts, and important health updates via push notification service.
- Billing & Payments: Processing consultation fees, generating invoices, and maintaining payment records.
- Emergency Services: Connecting you to emergency bed availability and ambulance services when needed.
- Service Improvement: Analysing anonymised usage patterns to improve our platform and patient experience.
- Legal Compliance: Meeting our obligations under applicable healthcare and data protection regulations.
How We Share Your Information
Nova Health does not sell your personal or medical information to third parties. We share your data only in the following limited circumstances:
- Treating Medical Staff: Doctors and healthcare professionals involved in your care have access to your relevant medical records.
- Technology Partners: We use an encrypted video call platform for video consultations and our notification infrastructure for push notifications. These providers are bound by strict data protection agreements.
- Payment Processors: Payment-related information is shared with our payment gateway providers for transaction processing only.
- Legal Requirements: We may disclose information when required by law, court order, or government authority.
- Family Bookings: When you book an appointment for a family member, limited information about that booking is shared between the associated patient records.
⚕️ Your medical records are never shared with employers, insurers, or marketing companies without your explicit written consent.
How We Protect Your Data
We implement technical and organisational measures to protect your information from unauthorised access, disclosure, or misuse.
- Encrypted Transmission: All data transmitted between your device and our servers is encrypted using HTTPS/TLS protocols.
- secure session Authentication: Access to your account requires secure secure encrypted session tokens with limited expiry periods.
- OTP Verification: Account access and sensitive actions are protected by multi-factor authentication sent to your registered mobile number.
- API Access Controls: Our APIs are secured with multi-layered API authentication to prevent unauthorised access.
- Access Controls: Only authorised medical and technical staff have access to patient data, limited to what is necessary for their role.
- Regular Security Reviews: We conduct periodic security assessments of our systems and infrastructure.
Despite our best efforts, no method of data transmission or storage is 100% secure. If you suspect any unauthorised access to your account, please contact us immediately.
Your Privacy Rights
You have the following rights regarding your personal and medical information held by Nova Health:
Right to Access
Request a copy of the personal and medical data we hold about you.
Right to Correct
Update or correct inaccurate information in your profile at any time.
Right to Delete
Request deletion of your data, subject to legal and medical retention requirements.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to certain types of processing, including non-essential communications.
Notification Control
Opt out of push notifications and non-essential communications at any time.
To exercise any of these rights, please contact our Privacy Team using the details in Section 9. We will respond to your request within 30 days.
Cookies & Tracking Technologies
Our mobile application uses the following tracking technologies:
- our push notification service: We store your device's device notification token to deliver push notifications for appointments, incoming video calls, and health updates. This token is linked to your account and updated automatically when it refreshes.
- Session Tokens: secure session tokens are stored locally on your device to maintain your authenticated session. These expire automatically and can be invalidated by logging out.
- Analytics: We may use anonymised analytics to understand how patients interact with our app, helping us identify areas for improvement. No personally identifiable information is included in analytics data.
We do not use third-party advertising cookies or cross-site tracking technologies.
Children's Privacy
Nova Health specialises in Pediatric Emergency and Women's Health — طوارئ الأطفال و صحة المرأة. We frequently provide care for children and minors.
Patient accounts for children are created and managed by a parent or legal guardian. The parent or guardian is responsible for all account activity and consents to the collection of their child's medical information on their behalf.
We do not knowingly allow children under 18 to create independent accounts or submit personal information directly. If you believe a child has provided information without parental consent, please contact us immediately and we will remove that information.
👶 Family booking is supported in our app — parents can book appointments for their children and manage their health records under a single account with proper relationship linkage.
Changes to This Privacy Policy
Nova Health may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy.
- Send a push notification to all registered app users informing them of the update.
- Where required by law, request renewed consent before applying changes to how we process your data.
Your continued use of Nova Health's services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
Contact Our Privacy Team
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a concern about how your data is handled, please reach out to us.
Nova Health Privacy Team
طوارئ الأطفال و صحة المرأة
We respond to all privacy enquiries within 30 days.